1838 matches found
node-notifier Package Command Injection Code Execution
The vulnerability of the node-notifier package is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Botkube - An App That Helps You Monitor Your Kubernetes Cluster, Debug Critical Deployments And Gives Recommendations For Standard Practices
For complete documentation visit www.botkube.io BotKube integration with Slack, Mattermost or Microsoft Teams helps you monitor your Kubernetes cluster, debug critical deployments and gives recommendations for standard practices by running checks on the Kubernetes resources. You can also ask...
CloudBees Jenkins Jabber Notifier and Control Plugin Cross-Site Request Forgery Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...
CVE-2021-21634
Jenkins Jabber XMPP notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...
CVE-2021-21634
Jenkins Jabber XMPP notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...
CVE-2021-21634
CVE-2021-21634 affects the Jenkins Jabber (XMPP) notifier and control Plugin: versions 1.41 and earlier store passwords in plaintext in the global configuration file hudson.plugins.jabber.im.transport.JabberPublisher.xml on the Jenkins controller, exposing credentials to users with filesystem acc...
CVE-2021-21634
Jenkins Jabber XMPP notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...
Jenkins Jabber (XMPP) notifier and control security vulnerabilities
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...
CVE-2021-21634: Insufficiently Protected Credentials
Jenkins Jabber XMPP notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...
PT-2021-14677 · Jenkins · Jenkins Jabber (Xmpp) Notifier/Control Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Jabber XMPP notifier and control Plugin versions 1.41 and earlier Description: The issue concerns the storage of passwords in the global configuration file on the Jenkins controller. Specifically, passwords are stored unencrypted in t...
nodejs-node-notifier: command injection due to the options params not being sanitised when being passed an array
A flaw was found in node-notifier. An attacker can run arbitrary commands on Linux machines due to the options params not being sanitized when being passed an array...
Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 1.2.2 security and bug fix update
An update is now available for Red Hat Ansible Automation Platform 1.2.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
@abdullah2993/web-ext-webpack-plugin (>=1.1.0, <=1.1.1), @finsemble/finsemble-electron-adapter (5.0.0-bc-1) +9 more potentially affected by CVE-2020-7789 via node-notifier (8.0.0)
node-notifier NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-notifier and may be impacted: - @abdullah2993/web-ext-webpack-plugin =1.1.0, =15.0.0, =0.1.19-a2, =0.5.17-a10, =2.4.0, =0.0.38, =5.1.0, =5.4.1 - web-ext-build 0.0.12 -...
GHSA-5FW9-FQ32-WV5P OS Command Injection in node-notifier
This affects the package node-notifier before 8.0.1. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array...
@abdullah2993/web-ext-webpack-plugin (>=1.1.0, <=1.1.1), @finsemble/finsemble-electron-adapter (5.0.0-bc-1) +9 more potentially affected by CVE-2020-7789 via node-notifier (8.0.0)
node-notifier NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-notifier and may be impacted: - @abdullah2993/web-ext-webpack-plugin =1.1.0, =15.0.0, =0.1.19-a2, =0.5.17-a10, =2.4.0, =0.0.38, =5.1.0, =5.4.1 - web-ext-build 0.0.12 -...
OS Command Injection in node-notifier
This affects the package node-notifier before 8.0.1. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array...
CVE-2020-7789
A flaw was found in node-notifier. An attacker can run arbitrary commands on Linux machines due to the options params not being sanitized when being passed an array...
CVE-2020-7789
This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array...
CVE-2020-7789
CVE-2020-7789 affects the package node-notifier prior to 9.0.0. The flaw allows an attacker to run arbitrary commands on Linux machines because the options params are not sanitised when passed as an array. Remediation: upgrade node-notifier to a fixed version (9.0.0 or newer). The connected docum...